According to Engadget, citing security company Malwarebytes, there was a data breach on Instagram, exposing sensitive information of approximately 17.5 million users, including usernames, emails, phone numbers, and physical addresses. The compromised data has been sold on the dark web or used for phishing attacks and account takeovers. Malwarebytes states that this incident may be related to an API exposure issue on Instagram in 2024. Affected users have recently received frequent password reset emails. As of now, Meta has not issued an official response. Security agencies recommend users enable two-factor authentication (2FA) and change their passwords.